From 4483520c1fa8c8a5783a12e1510556f2c7d00bcd Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 3 Sep 2025 17:10:44 +0000 Subject: [PATCH] Bump the github-actions group across 1 directory with 5 updates Bumps the github-actions group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `4` | `5` | | [ruby/setup-ruby](https://github.com/ruby/setup-ruby) | `1.245.0` | `1.257.0` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `4.3.0` | `5.0.0` | | [rubygems/configure-rubygems-credentials](https://github.com/rubygems/configure-rubygems-credentials) | `e3f5097339179e0d4c7321ab44209e7e02446746` | `8ae0eaabe45f0a742d106f45e216640f4488922f` | | [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) | `2.4.0` | `3.0.0` | Updates `actions/checkout` from 4 to 5 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v4...v5) Updates `ruby/setup-ruby` from 1.245.0 to 1.257.0 - [Release notes](https://github.com/ruby/setup-ruby/releases) - [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb) - [Commits](https://github.com/ruby/setup-ruby/compare/a4effe49ee8ee5b8b5091268c473a4628afb5651...44511735964dcb71245e7e55f72539531f7bc0eb) Updates `actions/download-artifact` from 4.3.0 to 5.0.0 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/d3f86a106a0bac45b974a628896c90dbdf5c8093...634f93cb2916e3fdff6788551b99b062d0335ce0) Updates `rubygems/configure-rubygems-credentials` from e3f5097339179e0d4c7321ab44209e7e02446746 to 8ae0eaabe45f0a742d106f45e216640f4488922f - [Release notes](https://github.com/rubygems/configure-rubygems-credentials/releases) - [Commits](https://github.com/rubygems/configure-rubygems-credentials/compare/e3f5097339179e0d4c7321ab44209e7e02446746...8ae0eaabe45f0a742d106f45e216640f4488922f) Updates `actions/attest-build-provenance` from 2.4.0 to 3.0.0 - [Release notes](https://github.com/actions/attest-build-provenance/releases) - [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md) - [Commits](https://github.com/actions/attest-build-provenance/compare/v2.4.0...v3.0.0) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: ruby/setup-ruby dependency-version: 1.257.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/download-artifact dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: rubygems/configure-rubygems-credentials dependency-version: 8ae0eaabe45f0a742d106f45e216640f4488922f dependency-type: direct:production dependency-group: github-actions - dependency-name: actions/attest-build-provenance dependency-version: 3.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/acceptance.yml | 4 ++-- .github/workflows/build.yml | 4 ++-- .github/workflows/copilot-setup-steps.yml | 4 ++-- .github/workflows/integration.yml | 4 ++-- .github/workflows/lint.yml | 4 ++-- .github/workflows/release.yml | 18 +++++++++--------- .github/workflows/test.yml | 4 ++-- 7 files changed, 21 insertions(+), 21 deletions(-) diff --git a/.github/workflows/acceptance.yml b/.github/workflows/acceptance.yml index 0c36ab7..0e520b9 100644 --- a/.github/workflows/acceptance.yml +++ b/.github/workflows/acceptance.yml @@ -16,9 +16,9 @@ jobs: steps: - name: checkout - uses: actions/checkout@v4 + uses: actions/checkout@v5 - - uses: ruby/setup-ruby@a4effe49ee8ee5b8b5091268c473a4628afb5651 # pin@v1.245.0 + - uses: ruby/setup-ruby@44511735964dcb71245e7e55f72539531f7bc0eb # pin@v1.257.0 with: bundler-cache: true diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 60d97d1..8e987cb 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -22,9 +22,9 @@ jobs: steps: - name: checkout - uses: actions/checkout@v4 + uses: actions/checkout@v5 - - uses: ruby/setup-ruby@a4effe49ee8ee5b8b5091268c473a4628afb5651 # pin@v1.245.0 + - uses: ruby/setup-ruby@44511735964dcb71245e7e55f72539531f7bc0eb # pin@v1.257.0 with: bundler-cache: true diff --git a/.github/workflows/copilot-setup-steps.yml b/.github/workflows/copilot-setup-steps.yml index 360e211..cbbc203 100644 --- a/.github/workflows/copilot-setup-steps.yml +++ b/.github/workflows/copilot-setup-steps.yml @@ -12,9 +12,9 @@ jobs: contents: read steps: - name: checkout - uses: actions/checkout@v4 + uses: actions/checkout@v5 - - uses: ruby/setup-ruby@a4effe49ee8ee5b8b5091268c473a4628afb5651 # pin@v1.245.0 + - uses: ruby/setup-ruby@44511735964dcb71245e7e55f72539531f7bc0eb # pin@v1.257.0 with: bundler-cache: true diff --git a/.github/workflows/integration.yml b/.github/workflows/integration.yml index e203984..18cd33c 100644 --- a/.github/workflows/integration.yml +++ b/.github/workflows/integration.yml @@ -19,9 +19,9 @@ jobs: steps: - name: checkout - uses: actions/checkout@v4 + uses: actions/checkout@v5 - - uses: ruby/setup-ruby@a4effe49ee8ee5b8b5091268c473a4628afb5651 # pin@v1.245.0 + - uses: ruby/setup-ruby@44511735964dcb71245e7e55f72539531f7bc0eb # pin@v1.257.0 with: bundler-cache: true ruby-version: ${{ matrix.ruby }} diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index 14a9b96..9ac31cc 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -16,9 +16,9 @@ jobs: steps: - name: checkout - uses: actions/checkout@v4 + uses: actions/checkout@v5 - - uses: ruby/setup-ruby@a4effe49ee8ee5b8b5091268c473a4628afb5651 # pin@v1.245.0 + - uses: ruby/setup-ruby@44511735964dcb71245e7e55f72539531f7bc0eb # pin@v1.257.0 with: bundler-cache: true diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index cad6673..70ba8ab 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -24,11 +24,11 @@ jobs: steps: - name: checkout - uses: actions/checkout@v4 + uses: actions/checkout@v5 with: persist-credentials: false - - uses: ruby/setup-ruby@a4effe49ee8ee5b8b5091268c473a4628afb5651 # pin@v1.245.0 + - uses: ruby/setup-ruby@44511735964dcb71245e7e55f72539531f7bc0eb # pin@v1.257.0 with: bundler-cache: false @@ -58,11 +58,11 @@ jobs: packages: write id-token: write steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v5 with: persist-credentials: false - - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 + - uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 with: artifact-ids: ${{ needs.build.outputs.artifact-id }} @@ -76,7 +76,7 @@ jobs: run: | GEM_HOST_API_KEY=${GITHUB_TOKEN} gem push --key github --host https://rubygems.pkg.github.com/${OWNER} $ARTIFACT_PATH/${GEM_NAME}-${GEM_VERSION}.gem - - uses: ruby/setup-ruby@a4effe49ee8ee5b8b5091268c473a4628afb5651 # pin@v1.245.0 + - uses: ruby/setup-ruby@44511735964dcb71245e7e55f72539531f7bc0eb # pin@v1.257.0 with: bundler-cache: false @@ -84,7 +84,7 @@ jobs: run: script/bootstrap - name: Configure RubyGems Credentials - uses: rubygems/configure-rubygems-credentials@e3f5097339179e0d4c7321ab44209e7e02446746 # pin@main + uses: rubygems/configure-rubygems-credentials@8ae0eaabe45f0a742d106f45e216640f4488922f # pin@main - name: sign ruby gem env: @@ -128,12 +128,12 @@ jobs: contents: read steps: - - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 + - uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 with: artifact-ids: ${{ needs.build.outputs.artifact-id }} - name: attest build provenance - uses: actions/attest-build-provenance@v2.4.0 + uses: actions/attest-build-provenance@v3.0.0 with: subject-path: "artifact/${{ needs.build.outputs.gem_path }}" @@ -143,7 +143,7 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 + - uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 with: artifact-ids: ${{ needs.build.outputs.artifact-id }} diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index d149f7e..33056f9 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -19,9 +19,9 @@ jobs: steps: - name: checkout - uses: actions/checkout@v4 + uses: actions/checkout@v5 - - uses: ruby/setup-ruby@a4effe49ee8ee5b8b5091268c473a4628afb5651 # pin@v1.245.0 + - uses: ruby/setup-ruby@44511735964dcb71245e7e55f72539531f7bc0eb # pin@v1.257.0 with: bundler-cache: true ruby-version: ${{ matrix.ruby }}